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DEVICE FOR LIMITING ACCESS TO A CONFINED SPACE 



The present invention concerns locks for limiting access to a confined and secured 
space, banknote dispensing devices and machines, and networks formed of devices 
fitted with such locks. 

It concerns more particularly a lock of the type including: / 

■ a bolt, capable of occupying first and second positions in which it is 
respectively possible or impossible to access the confined space, 

■ an electromechanical device, for allowing or preventing the bolt from moving 
from one of the bolt positions to the other, 

■ a control circuit for addressing commands to the electromechanical device, 
and 

■ a communication interface provided with a terminal forming an input to the 
lock, and arranged so as to be able to be connected, via the terminal, at least 
indirectly, to a computer type management system. 

Such locks are used, for example, in banknote dispensing apparatus, better known 
by the name "cash dispensers", in controlling the opening of hotel rooms or in bank 
vaults, for controlling safes. 

In the known systems, such as those described, for example, in EP Patent 
Application No. 0 985 790, the means for controlling the lock include a 
microprocessor, a memory and a keyboard, arranged such that, in order to access 
the confined space, an operator enters an access code by means of the keyboard. 
The microprocessor checks this code, as a function of information that it will search 
for in the memory, and gives or does not give the command to release the bolt. 

In the aforementioned Patent Application, the code entered by the operator is 
different each time. This code is generated synchronously by the lock microprocessor 
and by a computer external to the lock, generally placed at the head office of the 
company responsible for accessing the confined space. The code originating from 
the external computer is transmitted to the operator when he starts visiting the cash 
dispensers, or by telephone, before he accesses a given cash dispenser. 



Various variants of locks connected to a computer are described in US Patent Nos. 
5,774,958, 5,448,660 and 5,475,378, WO 96-05552 and EP 0,668,423. In these 
documents, the lock is, generally, fitted with a keyboard and a screen, to allow an 
operator, responsible for accessing the confined space protected by the lock, to take 
an active part in controlling the lock. 

With such solutions, each lock includes autonomous processing means. It is thus not 
possible to provide remote control. However, it appears that the security of the 
persons involved in controlling the confined space and that of the objects located 
therein would be considerably improved if the lock could only be operated when it 
receives a command from a place located somewhere other than on the site where 
the apparatus is located. In order to be able to guarantee secure remote control, a 
reliable and practically inviolable communication protocol is necessary. 

It is an object of the present invention thus to allow more secure control of access to 
confined and secured spaces. This object is achieved owing to the fact that the 
communication interface and the control circuit are arranged such that the data 
originating from outside the lock and addressed to the input terminal conform to the 
following protocol: 

■ a first pulse„train defining the device concerned; 

■ a second pulse train defining the total length of the message; 

■ a third pulse train including data relating to the command; and 

■ a fourth pulse train for checking that there are no errors. 

Advantageously, the control circuit includes: 

■ a memory in which there is stored at least one item of data in correlation with 
a code capable of commanding the lock to open, 

■ means for comparing the data and the code, and 

■ a pulse generator for operating the electromechanical device when there is a 
match between the code received and the stored data. 

Such a solution guarantees secure access that does not necessarily require 
permanent monitoring by the management system. 

In order to allow the lock history, maintenance and surveillance to be monitored 
remotely, the memory is arranged to store, in addition, data relating to the last 



operations carried out. Moreover, the control circuit is arranged so as to be able to 
address data relating to such operations to the management system, when it is 
commanded to do so. 

In such devices, it is safer for the opening command to be given without directly 
involving the operator in the control of the operation. This is why, advantageously, the 
interface is exclusively connected to the management system. 

The present invention also concerns security devices for controlling access to a 
confined and secured space. It relates more particularly to a device including: 

■ a lock, of the type controlled by an access code, arranged for limiting access 
to the space and including a control circuit and a communication interface, 

■ data input means allowing an operator to enter the access code, 

■ a coordination device connected to the lock and to the data input means, and 
provided with a connection for connecting the lock to a computer type 
management system. 

In order to ensure a reliable and secure connection between the management 
system and the device, the coordination device, the interface and the control circuit 
are arranged such that they communicate with each other in accordance with a 
protocol including: 

■ a first pulse train defining the device concerned, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors. 

A device of this type is well suited to simultaneous monitoring of several locks. It 
therefore further includes a bus connecting the locks to the coordination device. 

The device described hereinbefore finds application in the field of cash dispensers, 
which include: 

■ a cash box defining a confined space intended to contain the notes, and 
provided with a door, 

■ a lock of the type controlled by an access code, for allowing or preventing the 
door from opening and thus limiting access to the cash box, 

■ a dispensing mechanism for removing the notes from the cash box, 



■ data input means allowing an operator to address commands to the cash 
dispenser, 

■ a coordination device connected to the data input means, and 

■ connecting means for connecting the coordination device to a management 
system. 

In order to allow real time monitoring and management of the cash dispenser, while 
simplifying the structure of its lock, and guaranteeing reliable and secure relations, 
the lock is connected to the coordination device from which it receives access code 
carrier signals. In this cash dispenser, the lock and the management system 
communicate with each other in accordance with a protocol including: 

■ a first pulse train defining the device concerned, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors. 

Advantageously, the management system, the coordination device and the cash 
dispenser lock are arranged such that the data originating from the management 
system prevails over that originating from the data input means. Consequently, it is 
possible to prohibit access to a cash dispenser if a doubt arises, from the 
management system, even during the cash box opening procedure. 

In order to ensure optimum working conditions, devices such as those described 
hereinbefore are advantageously integrated in a management network for controlling 
access to confined and secured spaces. In this network, each device includes: 

■ a lock for limiting access to the confined space, the lock including: 

- an electromechanical device arranged for allowing or preventing access 
to said space, 

- a control circuit including a memory in which there is stored at least one 
data item in correlation with a code capable of commanding the lock to 
open, means for comparing the data and the code, and a pulse 
generator for operating the electromechanical device when there is a 
match between the code received and the stored data, 

■ data input means arranged to allow an operator to enter the access code, and 

■ a coordination device connected to the lock and to the data input means. 



In this network, the control circuit and the coordination device are arranged such that 
the confined space is only accessible if the access code matches the memory data, 
and the computer does not prevent access. In order to guarantee a secure and 
reliable connection, the computer and the lock communicate with each other in 
accordance with a protocol including: 

■ a first pulse train defining the device concerned, 

■ a second pulse train defining the total length of the message, 

■ a third pulse train including data relating to the command, and 

■ a fourth pulse train for checking that there are no errors: 

Advantageously, and in order to increase security, the control circuit of each of the 
devices is arranged such that it only address control pulses if the code matches the 
stored data and the computer gives its agreement. 

Other features and advantages of the invention will appear from the following 
description, made with reference to the annexed drawing, in which: 

■ Figures 1 and 2 show, according to the invention, respectively and 
schematically, a lock and a cash dispenser network. 

Figure 1 shows a lock 10, which includes a bolt 12 capable of occupying a first, and 
second position, one of which, called the closed position, is for preventing access to 
a confined space, for the purpose of securing said space. It is provided with a rack or 
toothed part 12a. The movement of bolt 12 is ensured by a control lever 14, 
accessible from outside the confined space and provided with a toothed sector 14a 
meshed with toothing 12a. 

Lock 10 further includes an electromechanical device 16 provided with a stop 18 and 
an electromagnet 20 controlling the movement of stop 18, which impedes or allows 
the movement of bolt 12. The device is controlled by a circuit 22, which receives 
commands from an interface 24, provided with a first terminal 24a connected to 
control circuit 22 and a second terminal 24b, for allowing connection with the exterior, 
as will be explained hereinafter. 

Circuit 22 essentially includes a memory 22a, in which data is stored, a comparison 
circuit 22b, for comparing the data received from interface 24 with that stored in 
memory 22a, and a pulse generator 22c, arranged such that, if the data received in 



reference matches the memory data, it gives the command to electromagnet 20 to 
release bolt 12. Advantageously, memory 22a can also store data relating to the last 
operations carried out on lock 10. 

All the elements of the lock, with the exception of control lever 14 and output 24b of 
interface 24, are inside the confined space. 

Figure 2 shows schematically a management network for a set of security devices 26 
for controlling access to confined and secured spaces, which will be described in 
more detail hereinafter, and a management system essentially including a central 
computer 28 and connecting means 30, generally formed of a cabled network. 

This Figure shows in detail only one of security devices 26. It includes two confined 
spaces defined by cash boxes 32 and 34, respectively fitted with doors 36 and 38 
and locks 40 and 42 of the type described with reference to Figure 1. 

Cash box 32 forms an integral part of a cash dispenser 44. it contains a note 
dispensing mechanism 46. The notes are delivered through a slot 48. 

Cash dispenser 44 further includes data input means 50 formed of a keyboard and a 
magnetic or smart card reader, and display means formed by means of a screen 52. 

A coordination device 54, advantageously formed of a microprocessor, receives the 
commands given by data input means 50 and interprets them in order to operate 
mechanism 46 and screen 52. 

Coordination device 54 is permanently connected to computer 28, via network 30, in 
order to monitor transactions and, if necessary, to interrupt them if a problem or 
fraudulent use is observed. Data is transmitted using a high security encoded 
language. It should be noted that one or more security devices 26 can be connected 
by a same line 30 to central computer 28. 

Cash box 34 is a night depository with a swiveling door 56, allowing boxes that are 
not shown in the drawing to be inserted therein, controlled by a lock 58. 



Security device 26 is arranged in a box 60 fitted with doors and cut out portions that 
are not referenced, to allow access to cash boxes 32 and .34, slot 48, door 56 and 
data input means 50 and screen 52. 

As appears in Figure 2, locks 40, 42 and 58 are connected, by means of a bus 62, to 
coordination device 54 and, via said device, to central computer 28. The connection 
between the locks and device 54 can be achieved by means of a four-wire line, such 
as those used in the field of telephony. 

If an operator has to command one or other of locks 40, 42 or 58 to open, he 
addresses a message to the coordination device via data input means 50, for 
example by means of a card and/or a figure entered on the keyboard. This message 
contains data relating to the identity of the operator, the lock concerned and the code 
which, when compared to. the data contained in memory 22a, allows access to one of 
the confined spaces. 

Since data input means 50 are connected both to locks 40, 42 and 58 and to central 
computer 28, via coordination device 54, the message can be analyzed by central 
computer 28 before the lock concerned is opened. Authorization to open can be 
given in real time, which means that each time a message enters, computer 28 
analyzes it and either gives its agreement or does not. Authorization may also be 
given in advance, in which case computer 28 gives coordination device 54, in 
advance, the indications relating to the messages that have to be taken into account. 

Transmission of data between locks 40, 42 and 58 and coordination device 54 is 
achieved in accordance with a protocol including: 

■ a first pulse train T1 defining the lock concerned, with an indication as to 
whether it is transmitting or receiving, 

■ a second pulse train T2 defining the total length of the message, 

■ a third pulse train T3 including data relating to the command transmitted, and 

■ a fourth pulse train T4 for checking that there are no errors. 

The length of T1, T2 and T3 is fixed, generally 8 bits (or 1 byte). In most cases, this is 
sufficient to meet requirements. However, the length of T3 is variable and can have 
up to 255 bytes. If that is not enough, the message can be broken down. This may, 



for example, be necessary when computer 28 asks a lock to transmit to it the data 
relating to the last operations carried out on the locks. 

This solution not only allows security to be increased in the control of access to 
confined spaces, since the locks can be permanently monitored, but also allows their 
cost to be reduced, since the internal control means can be limited. It is thus no 
longer necessary to ask an operator, who has to go to the site, to interrogate control 
circuit 22 to find out the last operations carried out on one or other of the locks. This 
can occur either in real time, or periodically. There is no risk either of a door 
remaining open inadvertently or by erroneous handling. 

The programs contained in computer 28 relate both to the dispensing of banknotes 
and to the management of the locks. It is also possible, via a network that is not 
shown in the drawing, for the computer to address data relating to the dispensing of 
notes to a first computer and data relating to the locks to a second, the persons 
responsible for these two aspects being different. 

It should be noted that the connection between coordination device 54 and computer 
28 is subject to the greatest care in known systems and the addressed messages 
thus have to be encoded with a maximum of security. Consequently, the risk of 
intervention on the line in order to open the lock in an unauthorized manner is 
practically nil. 

The network described with reference to Figure 2 relates to the dispensing of 
banknotes and to the management of night depositories. It goes without saying that 
the means implemented could be used for other purposes, particularly for managing 
safes in a bank safe deposit vault. 



